Security
Security and privacy
Custodia handles sensitive information about your company. This is how we protect it, without embellishment.
Architecture
The journey of your data
Follow the path your data takes from the moment you sign in until it is stored. Move forward by scrolling, or tap a stop.
Your browser
Every connection to Custodia leaves your browser encrypted by HTTPS/TLS. Nothing travels in plain text, neither your data nor your session.
Live
Security questionnaire, answered live
The questions a procurement or legal team usually asks before approving a vendor. Tap one to see the answer.
Need these answers in writing for your purchasing process? Write to us — with the Advanced plan or above, Custodia also generates this documentation automatically.
Who we share data with
We use a small number of providers, all as data processors under their own safeguards: Supabase (database and authentication), Vercel (application hosting), Stripe (payments) and Resend (sending transactional emails, such as invitations or assigned training). We don't sell or share your data with third parties for advertising. More detail in our Privacy Policy.